Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: Dx1O7RyIj/ADJWA+zp1V+tL38GrSgoCzLvVoNw5lg3k=
Subject key identifier: 2E:58:56:28:02:51:3E:D7:52:CE:0C:B8:9E:C0:14:99:1F:C5:24:12
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 019D9A3E024523F6E7D04161D080A39DC1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0F1D
Signing time: Fri 17 Apr 2026 07:00:48 +0000
Manifest this update: Fri 17 Apr 2026 07:00:48 +0000
Manifest next update: Sat 18 Apr 2026 07:00:48 +0000
Files and hashes: 1: BGQ2LKIFncDM2cfzFM7L-AHUNKo.roa (hash: XPAzl9bkrz2kxf/zVv1dmu57yasth2+5TX42SAtg2YE=)
2: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: +u9Z4iYNxjoNdtupVO/V4U/6PFYRAWne3BxxKGWB8DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:02:45:23:f6:e7:d0:41:61:d0:80:a3:9d:c1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Apr 17 07:00:48 2026 GMT
Not After : Apr 18 07:00:48 2026 GMT
Subject: CN=2e58562802513ed752ce0cb89ec014991fc52412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:4d:81:93:1c:13:97:70:98:ee:a4:7e:20:
16:b5:cc:79:33:14:15:d5:0d:7b:81:96:56:6a:d4:
fb:7a:7b:54:7c:5d:6c:69:ed:b4:5f:a9:5b:8d:c9:
3d:b6:65:27:55:d0:f9:2d:83:73:f9:a9:59:e8:d2:
97:b0:5b:98:8e:0b:26:d6:0b:c9:71:a7:18:0d:49:
c9:0d:2f:ba:a2:50:6c:80:71:ca:81:72:ce:20:ef:
c6:6e:a6:d4:d6:98:9f:d6:60:30:14:03:c8:a0:2a:
4c:a6:28:e6:6b:f1:25:13:34:b4:02:b1:32:c9:74:
99:b2:6e:c4:e4:61:f7:37:e9:6d:06:f0:75:50:3b:
0a:76:87:71:76:2a:ce:be:ab:c8:5f:59:b4:d6:fe:
82:00:a0:a2:dc:c5:89:c9:d0:04:92:4a:6b:28:ee:
ce:64:8c:6c:70:bb:b2:f0:c8:f1:0a:37:d8:14:52:
74:57:d9:ad:04:9b:c4:1e:9d:4e:35:81:f5:44:6c:
06:12:e5:b3:66:19:0a:e2:3b:0d:07:23:f9:42:45:
48:10:c4:82:71:fe:3f:4e:03:cc:a3:07:f2:20:9a:
83:9e:8c:17:64:2f:a0:df:d2:c8:a1:dd:7a:80:2f:
4e:ec:cb:44:e4:f3:a0:ff:8e:e3:0a:73:53:78:6f:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:56:28:02:51:3E:D7:52:CE:0C:B8:9E:C0:14:99:1F:C5:24:12
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:51:34:c8:69:6f:e0:41:f5:08:42:5f:3c:64:5f:3b:99:
f3:8d:d6:39:10:c3:b7:5b:15:a3:f4:4e:87:c3:22:97:c0:e3:
81:ed:4d:40:93:07:9a:7b:67:94:d0:33:88:93:b4:b6:1a:9e:
79:8f:3e:8e:1e:49:06:9a:99:49:8d:53:1a:e6:f6:d0:e5:ec:
80:2c:99:9a:96:c7:39:69:e5:93:27:a1:7c:b0:46:9f:50:51:
13:a8:e6:f2:32:28:40:4c:ce:cb:9b:57:8d:2c:f0:78:3d:de:
93:2e:20:48:67:93:26:86:db:60:a5:41:eb:0d:2b:e8:ab:9b:
66:2a:73:31:21:81:1b:f4:08:8c:bd:9a:ec:e1:ad:94:76:fa:
61:77:b2:09:c7:04:ae:57:53:a8:64:33:90:9f:ef:01:32:e7:
a2:ef:d8:e8:e1:ef:9d:3a:bb:5c:cd:7a:38:00:3a:61:64:de:
f2:35:b0:08:1c:ec:5a:84:e7:09:fe:d6:c7:47:e4:e1:c5:da:
e5:d2:a5:d8:8e:44:ad:a6:c0:52:94:eb:d2:26:48:24:09:b1:
e3:0e:75:f8:b9:c5:0a:98:6c:ed:7c:ff:90:df:83:89:6b:fd:
49:7e:3a:bf:a5:30:28:29:3e:6d:ac:69:05:eb:93:2c:f6:06:
a5:f3:a0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:24 2026 by rpki-client